Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,167 npm 223,990 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,027 reports · Feed

  • PyPI
    pipcryptlibary 1.1.0, 1.0.0
    MAL-2024-5509 reversing-labs
  • PyPI
    pipcryptaddsv2 1.0.0
    MAL-2024-5508 reversing-labs
  • PyPI
    pipcolourpackagesv2 1.0.0
    MAL-2024-5507 reversing-labs
  • PyPI
    pipcolourmodulev1 1.0.0
    MAL-2024-5506 reversing-labs
  • PyPI
    pipcolourlibv1 1.0.0
    MAL-2024-5505 reversing-labs
  • PyPI
    pipcolouringv1 1.0.0
    MAL-2024-5504 reversing-labs
  • PyPI
    pipcolouringslibv1 1.5.1, 1.0.0
    MAL-2024-5503 reversing-labs
  • PyPI
    pipcolouringskitsv1 1.1.0, 1.0.0
    MAL-2024-5502 reversing-labs
  • PyPI
    pipcolouringskits 1.1.0, 1.0.0
    MAL-2024-5501 reversing-labs
  • PyPI
    pipcolourextension 1.1.0, 1.0.0
    MAL-2024-5500 reversing-labs
  • PyPI
    pipcolouraddonsv1 1.1.0, 1.0.0
    MAL-2024-5499 reversing-labs
  • PyPI
    pipcolorv2 1.0.0
    MAL-2024-5498 reversing-labs
  • PyPI
    pipcolortoolkit 1.0.0
    MAL-2024-5497 reversing-labs
  • PyPI
    pipcolors 0.0.1
    MAL-2024-5496 reversing-labs
  • PyPI
    pipcolorpkgv1 1.0.0
    MAL-2024-5495 reversing-labs
  • PyPI
    pipcolorlibv3 1.0.0
    MAL-2024-5494 reversing-labs
  • PyPI
    pipcolorlibraryv1 1.0.0
    MAL-2024-5493 reversing-labs
  • PyPI
    pipcolorize 1.0.0
    MAL-2024-5492 reversing-labs
  • PyPI
    pipcoloringsextv1 1.0.0
    MAL-2024-5491 reversing-labs
  • PyPI
    pipcolorings 0.0.1
    MAL-2024-5490 reversing-labs
  • PyPI
    pipcoloringliberyv2 1.0.0
    MAL-2024-5489 reversing-labs
  • PyPI
    pipcoloringlibary 1.0.0
    MAL-2024-5488 reversing-labs
  • PyPI
    pipcoloradds 1.0.0
    MAL-2024-5487 reversing-labs
  • PyPI
    pipcoloraddonsv2 1.1.0, 1.0.0
    MAL-2024-5486 reversing-labs
  • PyPI
    pipcolor 0.0.1
    MAL-2024-5485 reversing-labs
  • PyPI
    pip-remote-access-test 0.0.3
    MAL-2024-5484 reversing-labs
  • PyPI
    pip-rce 0.0.2, 0.0.1, 0.0.3, 0.0.4
    MAL-2024-5483 reversing-labs
  • PyPI
    pip-goodthing 0.0.3
    MAL-2024-5482 reversing-labs
  • PyPI
    piolow 1.0.0
    MAL-2024-5481 reversing-labs
  • PyPI
    pinkhippodirty 99.0
    MAL-2024-5480 reversing-labs
  • PyPI
    pingdomv3 1.1.0, 0.1, 0.1.1, 0.0.3, 0.0.6, 1.0.0, 0.0.4, 0.0.2
    MAL-2024-5479 reversing-labs, kam193
  • PyPI
    pilpow 1.0.0
    MAL-2024-5478 reversing-labs
  • PyPI
    pillox 1.0.0
    MAL-2024-5477 reversing-labs
  • PyPI
    pillov 10.0.1
    MAL-2024-5476 reversing-labs
  • PyPI
    pilloq 1.0.0
    MAL-2024-5475 reversing-labs
  • PyPI
    pilloo 1.0.0
    MAL-2024-5474 reversing-labs
  • PyPI
    pilloa 1.0.0
    MAL-2024-5473 reversing-labs
  • PyPI
    pillo2 1.0.0
    MAL-2024-5472 reversing-labs
  • PyPI
    pillkw 1.0.0
    MAL-2024-5471 reversing-labs
  • PyPI
    pilliw 1.0.0
    MAL-2024-5470 reversing-labs